TLDR Tech / IT
Bitwarden CLI Supply Chain Attack Exposes Dev Secrets
A compromised Bitwarden CLI package harvested GitHub tokens, SSH keys, and environment secrets within ~90 minutes of release. This demonstrates the rapid propagation of supply chain attacks. Short-lived exposure windows are now enough to cause damage, highlighting the increased importance of dependency pinning, package verification, and CI/CD isolation.
Read the full story